From 59f46d2eb0e31b587ec2fb4be79f29fbb5eabefe Mon Sep 17 00:00:00 2001
From: Rasmus Wejlgaard <pez@pez.sh>
Date: Sun, 29 Mar 2026 13:08:15 +0000
Subject: [PATCH] Remove stale DNS records: chimera, gopher, ecp-dev, and old
 verification TXT
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Stale A records removed:
- chimera.pez.sh → 13.43.223.167 (AWS IP reassigned, now serving unrelated site)
- gopher.pez.sh → 83.94.248.182 (unreachable on all ports)
- 0o9lix.ecp-dev.pez.sh → 0.0.0.0 (placeholder, never valid)

Stale TXT verification records removed:
- protonmail-verification (mail is self-hosted now, not ProtonMail)
- keybase-site-verification (Keybase is effectively dead)
- MS=ms99554544 (Microsoft domain verification, no active MS services)
- google-site-verification (no active Google services using this domain)
- apple-domain (no longer using Apple services after GrapheneOS switch)

PESO-97
---
 terraform/cloudflare_dns.tf | 67 -------------------------------------
 1 file changed, 67 deletions(-)

diff --git a/terraform/cloudflare_dns.tf b/terraform/cloudflare_dns.tf
index a9a8da9..36d541e 100644
--- a/terraform/cloudflare_dns.tf
+++ b/terraform/cloudflare_dns.tf
@@ -9,15 +9,6 @@ resource "cloudflare_zone" "pez-sh" {
 # A Records
 # =============================================================================
 
-resource "cloudflare_dns_record" "ecp-dev-0o9lix" {
-  zone_id = cloudflare_zone.pez-sh.id
-  name    = "0o9lix.ecp-dev"
-  type    = "A"
-  content = "0.0.0.0"
-  proxied = false
-  ttl     = 300
-}
-
 resource "cloudflare_dns_record" "alertmanager" {
   zone_id = cloudflare_zone.pez-sh.id
   name    = "alertmanager"
@@ -54,15 +45,6 @@ resource "cloudflare_dns_record" "bitwarden" {
   ttl     = 1
 }
 
-resource "cloudflare_dns_record" "chimera" {
-  zone_id = cloudflare_zone.pez-sh.id
-  name    = "chimera"
-  type    = "A"
-  content = "13.43.223.167"
-  proxied = false
-  ttl     = 1
-}
-
 resource "cloudflare_dns_record" "cloud" {
   zone_id = cloudflare_zone.pez-sh.id
   name    = "cloud"
@@ -90,15 +72,6 @@ resource "cloudflare_dns_record" "git" {
   ttl     = 1
 }
 
-resource "cloudflare_dns_record" "gopher" {
-  zone_id = cloudflare_zone.pez-sh.id
-  name    = "gopher"
-  type    = "A"
-  content = "83.94.248.182"
-  proxied = false
-  ttl     = 1
-}
-
 resource "cloudflare_dns_record" "grafana" {
   zone_id = cloudflare_zone.pez-sh.id
   name    = "grafana"
@@ -412,43 +385,3 @@ resource "cloudflare_dns_record" "root-txt-spf" {
   content = "v=spf1 ip4:167.235.134.154 ip6:2a01:4f8:1c1e:9c53::1 -all"
   ttl     = 1
 }
-
-resource "cloudflare_dns_record" "root-txt-protonmail" {
-  zone_id = cloudflare_zone.pez-sh.id
-  name    = "@"
-  type    = "TXT"
-  content = "protonmail-verification=66cf5eff60c61c46a0d36b108c5cfbddc4f2eede"
-  ttl     = 1
-}
-
-resource "cloudflare_dns_record" "root-txt-keybase" {
-  zone_id = cloudflare_zone.pez-sh.id
-  name    = "@"
-  type    = "TXT"
-  content = "keybase-site-verification=ur7GwlgtEEPgIZ-2P0fyFsniuu6YwdkluO7N6LkymK0"
-  ttl     = 1
-}
-
-resource "cloudflare_dns_record" "root-txt-ms" {
-  zone_id = cloudflare_zone.pez-sh.id
-  name    = "@"
-  type    = "TXT"
-  content = "MS=ms99554544"
-  ttl     = 300
-}
-
-resource "cloudflare_dns_record" "root-txt-google" {
-  zone_id = cloudflare_zone.pez-sh.id
-  name    = "@"
-  type    = "TXT"
-  content = "google-site-verification=BZD6ITg5SFnc7mQcb9KGkPwhP9gQKDZgw4nrFOZ0Y0w"
-  ttl     = 1
-}
-
-resource "cloudflare_dns_record" "root-txt-apple" {
-  zone_id = cloudflare_zone.pez-sh.id
-  name    = "@"
-  type    = "TXT"
-  content = "apple-domain=1zXuOydmezm51GT8"
-  ttl     = 1
-}